Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131362e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3131362e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          krzqSo7Nh5yMzKv3/DuZsRg0ZjFjBvi8ONNehJpJfPo=
Subject key identifier:   16:A8:AC:F6:A9:14:8B:BE:6E:1F:BA:5E:09:4A:ED:5F:64:A9:AE:C2
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       259703DB0E2072D2738CFCF4884071E550CA2D8B
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131362e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 18 Mar 2025 13:37:48 +0000
ROA not before:           Tue 18 Mar 2025 13:32:48 +0000
ROA not after:            Tue 17 Mar 2026 13:37:48 +0000
asID:                     263612
IP address blocks:        179.189.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:97:03:db:0e:20:72:d2:73:8c:fc:f4:88:40:71:e5:50:ca:2d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 18 13:32:48 2025 GMT
            Not After : Mar 17 13:37:48 2026 GMT
        Subject: CN=16A8ACF6A9148BBE6E1FBA5E094AED5F64A9AEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:3a:a7:1e:cf:38:5a:98:53:b7:77:72:4b:
                    43:0e:36:76:23:76:70:3f:0c:18:a5:fc:4f:e5:94:
                    ad:23:ea:34:fe:29:75:2a:32:0d:17:1c:a1:cc:f4:
                    73:de:2f:2b:31:ac:d8:53:2a:7b:81:eb:24:83:3a:
                    26:f4:31:da:1d:d1:8a:2b:35:6f:c2:af:be:d5:e5:
                    65:68:27:8b:3a:92:cb:51:be:0c:3d:07:cc:f0:eb:
                    b9:84:8d:c5:f9:d5:d1:3a:ed:d8:36:5a:23:ed:81:
                    88:fe:3b:7a:37:6b:c5:3b:11:e1:71:1d:82:88:cb:
                    ee:e4:14:25:54:20:8e:81:d6:2a:47:b9:f2:20:48:
                    91:53:40:18:be:41:2a:93:30:da:90:a6:e0:a3:4f:
                    98:11:e8:cb:de:25:da:93:2e:2c:2f:3f:74:cd:de:
                    d0:df:49:2c:bc:ed:12:50:24:f0:b1:3a:c9:8c:17:
                    c6:2d:de:94:33:bf:5f:31:57:32:c3:21:1b:ba:4d:
                    dd:ed:98:1c:e9:c7:4a:d4:74:85:49:ee:33:3c:3f:
                    52:86:0b:e3:89:f1:c9:a3:f6:51:86:ab:21:b1:29:
                    ac:21:03:b3:a2:98:ac:4a:06:43:09:86:ae:f8:ad:
                    d5:43:90:9d:66:c5:98:f4:67:43:82:b9:e3:69:89:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A8:AC:F6:A9:14:8B:BE:6E:1F:BA:5E:09:4A:ED:5F:64:A9:AE:C2
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131362e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:ad:7f:f8:bd:39:e1:1c:db:2e:b1:c7:f4:63:97:da:f9:3f:
         23:98:93:27:ae:c2:11:be:d0:62:0c:e6:49:55:da:ab:e3:b6:
         54:72:6a:98:7d:bf:60:0f:3c:25:33:c6:28:53:be:27:93:34:
         1d:29:8b:39:c1:7f:dc:1e:ce:fc:07:e4:f5:c1:3d:01:b9:cf:
         4a:73:c1:73:8d:c4:0b:e1:b6:b6:1f:b0:d6:db:d4:6c:c7:1d:
         db:f1:f6:ee:ae:c7:a4:c4:64:ab:39:4d:d8:d5:2c:0f:d7:36:
         6a:0f:64:5b:20:13:08:e5:cf:b2:75:cd:ba:3b:f6:d4:26:cc:
         dc:c1:cf:70:fd:2e:ec:3d:62:3b:e1:b8:4a:0c:01:e4:85:3f:
         c6:b6:97:9d:7d:56:c0:47:fc:e4:d4:5e:e8:9c:b4:d8:a5:08:
         9a:d2:85:8c:82:65:ba:12:55:ba:ff:3f:61:f3:36:c0:dc:0c:
         fa:3a:d6:3c:8f:a8:25:56:74:d1:06:00:2d:91:32:cc:d2:f5:
         78:b0:25:d6:49:be:f8:fa:f4:f5:a2:ad:19:57:9a:6c:0a:76:
         b1:ea:96:8c:90:17:d6:c4:11:0a:50:c5:06:29:3e:4b:10:39:
         79:fa:eb:d2:45:0f:0f:4f:69:a1:a1:79:10:b8:85:fb:f9:11:
         c6:d9:34:14
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJZcD2w4gctJzjPz0iEBx5VDKLYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNTAzMTgxMzMyNDhaFw0yNjAzMTcxMzM3NDhaMDMxMTAvBgNV
BAMTKDE2QThBQ0Y2QTkxNDhCQkU2RTFGQkE1RTA5NEFFRDVGNjRBOUFFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAODqnHs84WphTt3dyS0MONnYj
dnA/DBil/E/llK0j6jT+KXUqMg0XHKHM9HPeLysxrNhTKnuB6ySDOib0Mdod0Yor
NW/Cr77V5WVoJ4s6kstRvgw9B8zw67mEjcX51dE67dg2WiPtgYj+O3o3a8U7EeFx
HYKIy+7kFCVUII6B1ipHufIgSJFTQBi+QSqTMNqQpuCjT5gR6MveJdqTLiwvP3TN
3tDfSSy87RJQJPCxOsmMF8Yt3pQzv18xVzLDIRu6Td3tmBzpx0rUdIVJ7jM8P1KG
C+OJ8cmj9lGGqyGxKawhA7OimKxKBkMJhq74rdVDkJ1mxZj0Z0OCueNpiVkzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFqis9qkUi75uH7peCUrtX2SprsIwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzEzNzM5MmUzMTM4MzkyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbO9dDANBgkqhkiG9w0BAQsFAAOCAQEAia1/
+L054RzbLrHH9GOX2vk/I5iTJ67CEb7QYgzmSVXaq+O2VHJqmH2/YA88JTPGKFO+
J5M0HSmLOcF/3B7O/Afk9cE9AbnPSnPBc43EC+G2th+w1tvUbMcd2/H27q7HpMRk
qzlN2NUsD9c2ag9kWyATCOXPsnXNujv21CbM3MHPcP0u7D1iO+G4SgwB5IU/xraX
nX1WwEf85NRe6Jy02KUImtKFjIJluhJVuv8/YfM2wNwM+jrWPI+oJVZ00QYALZEy
zNL1eLAl1km++Pr09aKtGVeabAp2seqWjJAX1sQRClDFBik+SxA5efrr0kUPD09p
oaF5ELiF+/kRxtk0FA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:17 2025 by rpki-client